CVE-2026-88819
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.
| CWE | CWE-290 CWE-345 |
| Vendor | eclipse foundation |
| Product | eclipse data plane core |
| Published | Sep 14, 2026 |
| Last Updated | Sep 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for eclipse foundation eclipse data plane core
Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse data plane core are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Eclipse Foundation / Eclipse Data Plane Core
a6f7d4cc0093931287c349e1e546ad2932c08e8d < 882fe22db42bc67abfd0304c4cdb141b762c35d1 0.1.0 ≤ 0.1.3
References
Credits
Eclipse Foundation Security Team